Don't try to invalidate a session ID of an empty string

XMLWordPrintable

    • Type: Suggestion
    • Resolution: Fixed
    • 2.8.3
    • Component/s: None
    • None

      Since CWD-4271, deleting an empty session token results in invalidating all sessions. As this was never an expected value, specifically check for it and fail locally.

      At the same time, check for cases that are calling this conditionally on having a session token and ensure they don't treat it as something that can be invalidated.

            Assignee:
            joe
            Reporter:
            joe
            Votes:
            0 Vote for this issue
            Watchers:
            11 Start watching this issue

              Created:
              Updated:
              Resolved: